CVE-2008-5326: Medium severity microsoft windows operating system vulnerability
Published Dec 5, 2008
·Updated
The ClearQuest Maintenance Tool in IBM Rational ClearQuest 7.0.0 before 7.0.0.4 and 7.0.1 before 7.0.1.3 on Windows allows local users to obtain (1) user and (2) database passwords by using a password revealer utility on a field containing a series of asterisks.
Affected Software
8 affected components
Microsoft Windows
IBM Rational ClearQuest=7.0.0.0
IBM Rational ClearQuest=7.0.0.1
IBM Rational ClearQuest=7.0.0.2
IBM Rational ClearQuest=7.0.0.3
IBM Rational ClearQuest=7.0.1
IBM Rational ClearQuest=7.0.1.1
IBM Rational ClearQuest=7.0.1.2
Remediation
Patch Available
Event History
Dec 5, 2008
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
12:30 AM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-5326?
CVE-2008-5326 is classified as having a moderate severity due to the risk of local users extracting passwords.
2
How do I fix CVE-2008-5326?
To fix CVE-2008-5326, update IBM Rational ClearQuest to version 7.0.0.4 or 7.0.1.3 or later.
3
Which versions of IBM Rational ClearQuest are affected by CVE-2008-5326?
CVE-2008-5326 affects IBM Rational ClearQuest versions prior to 7.0.0.4 and 7.0.1.3.
4
Can local attackers exploit CVE-2008-5326 easily?
Yes, local attackers can exploit CVE-2008-5326 easily using password revealer utilities to obtain sensitive data.
5
What kind of data can be compromised due to CVE-2008-5326?
CVE-2008-5326 allows the compromise of user and database passwords.